Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ignore major dependabot upgrades #900

Merged
merged 1 commit into from
Jun 21, 2022
Merged

Conversation

markphelps
Copy link
Collaborator

Ignore PRs from dependabot for major version updates as these are risky and should be done manually

See: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#ignore

@markphelps markphelps enabled auto-merge (squash) June 21, 2022 14:19
@markphelps markphelps merged commit fc07e92 into main Jun 21, 2022
@markphelps markphelps deleted the ignore-major-dep-upgrades branch June 21, 2022 14:25
markphelps added a commit that referenced this pull request Jun 23, 2022
* main:
  Update DEVELOPMENT.md
  Bump github.com/mattn/go-sqlite3 from 1.14.10 to 1.14.13 (#901)
  Update README.md
  Update README.md
  Ignore major dependabot upgrades (#900)
  Moving imports to vanity url in prep for move (#898)
  Bump aquasecurity/trivy-action from 0.3.0 to 0.4.1 (#891)
  Bump jpeg-js from 0.4.3 to 0.4.4 in /ui (#889)
  Bump @babel/plugin-syntax-jsx from 7.16.7 to 7.17.12 in /ui (#890)
  Bump vue-router from 3.5.3 to 3.5.4 in /ui (#887)
  Bump webpack-cli from 4.9.2 to 4.10.0 in /ui (#888)
  Bump @webpack-cli/serve from 1.6.1 to 1.7.0 in /ui (#886)
  Bump @babel/plugin-transform-runtime from 7.17.0 to 7.18.5 in /ui (#884)
  Bump buefy from 0.9.20 to 0.9.21 in /ui (#885)
  Bump @babel/runtime-corejs2 from 7.17.9 to 7.18.3 in /ui (#877)
  Bump @babel/preset-env from 7.16.11 to 7.18.2 in /ui (#879)
  Bump jest-playwright-preset from 1.7.0 to 1.7.2 in /ui (#880)
  Bump golang.org/x/tools from 0.1.10 to 0.1.11 in /_tools (#882)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant